Quantum Key Distribution with Qubit Pairs 
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We propose a new Quantum Key Distribution method in which Alice sends pairs of qubits to 
Bob, each in one of four possible states. Bob uses one qubit to generate a secure key and the other 
to generate an auxiliary key. For each pair he randomly decides which qubit to use for which key. 
The auxiliary key has to be added to Bob's secure key in order to match Alice's secure key. This 
scheme provides an additional layer of security over the standard BB84 protocol. 
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Quantum cryptography [1] is a field which has ma- 
tured since the first protocol, BB84, given by Bennett 
and Brassard in 1984 [2J. The idea is to generate a secret 
key between two remote parties, traditionally called Alice 
and Bob using a quantum channel. The secret key may 
then be used in sending encrypted messages through the 
so-called Vernam Cipher [3] or one-time pad. Vernam 
cipher has been proved to be very secure, under the con- 
dition that one shared key is to be used only once. 

In principle, BB84 is proven to be hundred percent se- 
cure [4]. However, when implemented in real life with 
non-ideal sources and detectors, several attacks have 
been successfully demonstrated against commercial QKD 
systems [a, Q. 

In the traditional BB84 scheme, Alice sends a stream of 
single qubits to Bob which eventually leads to the gen- 
eration of a secure key. Here we propose a new QKD 
scheme in which Alice sends a stream pairs of qubits to 
Bob. We will show that this scheme introduces an addi- 
tional feature over the standard BB84 protocols, which 
should make it more difficult to break. 

To set the ball rolling, we describe the BB84 QKD 
protocol [2j. 

• Alice sends single qubits to Bob randomly in one 
of the following states: |0), |+) and |— ), where 
|±) = (|0)±|l»A/2. 

• Bob measures the incoming qubit's state by ran- 
domly choosing a measurement of either the x- 
componcnt of the qubit or the z-component, with 
equal probability. Let us say, |0), |1) are eigen- 
states of the z-component of the qubit, and |±) arc 
the eigenstates of the x-component. 

• Bob publicly tells Alice which bases he used for each 
qubit he received (but, of course not the result of 
his measurement). 

• Alice publicly tells Bob which basis she sent each 
qubit in. 



• Alice and Bob keep only the data from those mea- 
surements for which their bases are the same, dis- 
carding all the rest. 

• This data is interpreted as a binary sequence ac- 
cording to the coding scheme \0) x — 0, \l) x = 1, 
|+>, = 1, |->» = 0. ' 

• Alice announces the results of a small subset of her 
measurements. Bob checks if he has identical re- 
sults. Any discrepency here indicates a possible 
evesdropping attempt. 

• If there is no discrepancy, the rest of the binary 
sequence is treated as the new key, and is identical 
for both Alice and Bob. 

In our new scheme, Alice sends pairs of qubits to Bob, 
randomly chosen to be in one of the following states, 

|l>i|l)a, 
|0)i|0) 2 , 
1 



^=(l+)l|+>2 + |-)l|-) 3 ) 
^(l+)l|->2 + |->l|+> 3 ), 



(1) 



where \±) t = (|1) 4 ± |0), ; )/\/2. For Alice, the key bits 
associated with each state she sends are as follows: 

|l)l|l>2 "> 1, 

|0)i|0) 2 -+ 0, 



0, 



(2) 
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In addition, she calls the first two states as z-basis, and 
the other two as x-basis. 

Bob uses one qubit for his secure key and one for the 
auxiliary key. For generating the secure key, he ran- 
domly measures the x-component or the z-component 
of the qubit. For the auxiliary key he measures only 
the x-componcnt. For his secure key measurement re- 
sults, he uses the following convention for key bit values: 
|1> ->■ 1, |0) -> 0, |+> ->■ 1, |-) -> 0. For his auxiliary 
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TABLE I: Result of a typical sequence of 15 qubits sent by 
Alice to Bob, where the measurement basis of Alice and Bob 
matches. When the auxiliary key is added to Bob's secure 
key, it matches with Alice's key. 



key measurement results, he uses the following conven- 
tion for key bit values: |+) — > 1, |— ) — > 0, if he measured 
x-component for the secure key; |+) — > 0, |— ) — > 0, if he 
measured z-component for the secure key. 

Alice and Bob announce their bases for secure key pub- 
licly, and discard those qubits for which their bases do 
not match. Various measurement results for rest of the 
cases where the bases agree, will be correlated in the fol- 
lowing fashion. If Alice sends z-basis, the secure key bits 
of Alice and Bob will be identical. If Alice sends x-basis, 
the secure key bits of Alice and Bob will be identical if 
the auxiliary key bit is 0; the secure key bits of Alice and 
Bob will be different if the auxiliary key bit is 1. 

Thus, for a sequence of qubit pairs sent, Alice and Bob's 
secure key bits will be identical if the corresponding aux- 
iliary bit is 0. Alice and Bob's secure key bits will not 
match for cases where the auxiliary bit is 1. So, Bob just 
needs to add his final auxiliary key to his secure key bit 
by bit, modulo 2. This way, his auxiliary bit 1 added to 



his non-matching secure key bit will make it identical to 
Alice's bit. 

An evesdropper trying to figure out the shared key in 
between, will have his task made difficult in more ways 
than it is in BB84. For correctly figuring out the auxil- 
iary key, the evesdropper has to know which of the two 
qubits was used for the auxiliary key for each and every 
pair, an impossible task. If we assume that the evesdrop- 
per is able to correctly guess which of the two qubits is 
used for the auxiliary key, he can simply make an x-basis 
measurement on those qubits, and generate the correct 
auxiliary key without Bob's knowledge. However, even 
in this near impossible circumstance, the rest of the com- 
munication still remains as the standard BB84. 

In conclusion, we have introduced a new QKD scheme 
in which Alice sends pairs of qubits to Bob in four pos- 
sible states. Bob randomly chooses one of the pair for 
his secure key and one for the auxiliary key. The auxil- 
iary key has to be added to Bob's secure key in order to 
get the correct shared key. An evesdropper job is made 
more difficult as he has to correctly predict which parti- 
cle Bob is going to use for secure key and which one for 
auxiliary key, for every pair used in the communication. 
Even if the evesdropper manages to acheive this near im- 
possible feat, he is still left with the job of cracking the 
BB84 security. We believe this scheme should be easily 
implcmcntablc in practice. 
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